Domain > relay2.mark-itt.ru

Welcome! Right click nodes and scroll the mouse to navigate the graph.

More information on this domain is in AlienVault OTX

Files that talk to relay2.mark-itt.ru

MD5	A/V
20837cfed9fcc3df5a3e414c18eff646	[Packed.Win32.Katusha.3!O] [WS.Reputation.1] [Kryptik.CDQY] [TrojWare.Win32.Kryptik.CBCJ] [BackDoor.Slym.13873] [Win32.Troj.Undef.(kcloud)] [Backdoor:Win32/Kelihos.F] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Trojan.Crypt_s] [Crypt_s.GNC] [Trojan.Win32.Kryptik.CBCJ]

DNS Resolutions

Date	IP Address
2014-06-18	217.14.192.20 (ClassC)
2025-01-20	217.14.192.43 (ClassC)

HTTP/1.1 200 OKConnection: keep-aliveDate: Mon, 20 Jan 2025 05:25:28 GMTContent-Type: text/html;charsetutf-8Content-Length: 32871Server: CommuniGatePro/7.1.4X-Content-Type-Options: nosniffX-XSS-Protection: 1;modeblockX-Frame-Options: DENY

!DOCTYPE html>html dirltr langen ng-controllerAppController>  head>    meta charsetutf-8 />    meta nameviewport contentwidthdevice-width, initial-scale1, maximum-scale1, user-scalableno />    meta http-equivX-UA-Compatible contentrequiresActiveXtrue />    title>Pronto!/title>    style>      :root{--accenting-color--50:#fff8e2;--accenting-color--100:#ffecb5;--accenting-color--200:#ffdf85;--accenting-color--300:#ffd455;--accenting-color--400:#ffc933;--accenting-color--500:#ffc020;--accenting-color--600:#ffb21b;--accenting-color--700:#ffa01a;--accenting-color--800:#fe8f19;--accenting-color--900:#fd7017;--base-color:var(--accenting-color--700);--theme-color--white:#fff;--theme-color--100:#f5f6f9;--theme-color--200:#eaebef;--theme-color--300:#d7d9df;--theme-color--400:#aeb3c1;--theme-color--500:#9399aa;--theme-color--600:#7d8498;--theme-color--700:#697086;--theme-color--800:#565d73;--theme-color--900:#444a5e;--theme-color--1000:#323849;--theme-color--1100:#282d3d;--theme-color--1200:#212532;--theme-color--1300:#171b26;--logo-width:172px;--logo-height:139px;--logo-margin-top:-100px}    /style>    link relstylesheet href/SkinFiles/aps.mark-itt.ru/Pronto/main.css?rand3ddb1caa />    link relstylesheet href/SkinFiles/aps.mark-itt.ru/Pronto/reset.css?rand3ddb1caa />    link relstylesheet href/SkinFiles/aps.mark-itt.ru/Pronto/cix.css?rand3ddb1caa />    !-- custom head tags -->  /head>  body classcustom-skin styledisplay: none;>    container-view>/container-view>    !-- not supported browser panel -->    div idpronto-login__not-supported-browser classpronto-login ng-showfalse>      div classpronto-login__wrapper pronto-login_not-supported_text>        div classpronto-login__wrapper-body>          div classpronto-login__form-wrapper>            img pre-src/SkinFiles/aps.mark-itt.ru/Pronto/not-supported_no-sign-spark.png?rand3ddb1caa classpronto-login_not-supported_no-sign>/img>            div classpronto-login_not-supported_text-holder pronto-login_not-supported_text>              h1>Ваш браузер не поддерживается/h1>              h4>Рекомендуем использовать последние версии браузеров Chrome, Firefox, Safari или Internet Explorer/h4>              h4 idpronto-login__ie_compatibility>Пожалуйста проверьте что ваш браузер не работает в режиме совместимости с предыдущими версиями/h4>            /div>            div classpronto-login_not-supported_browsers>              a hrefhttp://ie.microsoft.com>img pre-src/SkinFiles/aps.mark-itt.ru/Pronto/not-supported_ie.png?rand3ddb1caa classpronto-login_not-supported_icon pronto-login_not-supported_ie>/img>/a>              a hrefhttps://www.google.com/intl/en/chrome/browser/>img pre-src/SkinFiles/aps.mark-itt.ru/Pronto/not-supported_chrome.png?rand3ddb1caa  classpronto-login_not-supported_icon pronto-login_not-supported_chrome>/img>/a>              a hrefhttp://www.mozilla.org/firefox/new/>img pre-src/SkinFiles/aps.mark-itt.ru/Pronto/not-supported_ff.png?rand3ddb1caa classpronto-login_not-supported_icon pronto-login_not-supported_ff>/img>/a>              a hrefhttp://www.apple.com/safari/>img pre-src/SkinFiles/aps.mark-itt.ru/Pronto/not-supported_safari.png?rand3ddb1caa classpronto-login_not-supported_icon pronto-login_not-supported_safari>/img>/a>            /div>            h4 classpronto-login_not-supported_text-link idpronto-login_not-supported_text-link-id>              Вы можете в любом случае a idtry_anyway_link href#>попробовать зайти./a>            /h4>          /div>        /div>        div classpronto-login__wrapper-footer>        /div>      /div>    /div>    !-- BEGIN login window -->    div idpronto-login classpronto-login >      !-- custom header -->      div classpronto-login__wrapper>        div classpronto-login__wrapper-body>          !--  -->          div classpronto-login__form-wrapper>            !--  -->            form action methodpost classpronto-login__form                  autocompleteoff idmainFrom>              	script typetext/javascript>		var basePathRef  /SkinFiles/aps.mark-itt.ru/Pronto/;		skin  spark;		(function () {			use strict;			var logoImage  basePathRef + logo-big.png;			if (skin ! classic && skin ! ) {				logoImage  basePathRef + logo-big- + skin + .png;			}			function checkLoaded() {				if (!document.getElementById(pronto-login__logo-img-id)) {					setTimeout(function () {						checkLoaded();					}, 100);				} else {					document.getElementById(pronto-login__logo-img-id).setAttribute(src, logoImage);				}			}			checkLoaded();		}());	/script>div classpronto-login__logo>	img alt Logo idpronto-login__logo-img-id classpronto-login__logo-img />/div>div classpronto-login__start pronto-login-auth__start idpronto-login__start>	div classpronto-login__list>		ul classpronto-login__list-content>			li classpronto-login__item>				label classpronto-login__type>Имя Пользователя/label>				span classpronto-login__field-wrapper>					input nameusername typetext classpronto-login__field pronto-login__login autocompleteon tabindex1/>				/span>			/li>			li classpronto-login__item idpronto-login__domain-select-line styledisplay: none;>				label classpronto-login__type>Имя домена/label>				span classpronto-login__field-wrapper>					select idpronto-login__domain-selector						classpronto-login__field pronto-login__selector>/select>				/span>			/li>			li idpronto-login__password-line classpronto-login__item>				label classpronto-login__type>Пароль/label>				span classpronto-login__field-wrapper>					input namePassword typepassword classpronto-login__field pronto-login__password tabindex2 />				/span>			/li>		/ul>	/div>	div classpronto-login__error pronto-login__loginoptions-forgotpassword styledisplay: none;>YES/div>	div classpronto-login__error pronto-login__error-common>/div>	fieldset classpronto-login__remember>		input namerememberMe typecheckbox idpronto-login__remember	classpronto-login__remember-field tabindex3/> 	label forpronto-login__remember	classpronto-login__remember-label>Запомнить моё имя на этом компьютере/label>	/fieldset>		input typesubmit namelogin classpronto-button pronto-login__submit tabindex5 valueВойти />	a classpronto-login__link-button pronto-login__recover-password-invite>Восстановление Забытого Пароля/a>/div>div classpronto-login__start pronto-login-sms__start styledisplay: none;>	div classpronto-login__list>		ul classpronto-login__list-content>			li classpronto-login__item>label classpronto-login__type>SMS-пароль/label>				span classpronto-login__field-wrapper>input idsmsPassword namesmsPassword typetext classpronto-login__field pronto-login__sms tabindex1/>/span>			/li>		/ul>	/div>	div classpronto-login__error pronto-login__error-common>/div>	input typesubmit namesmsLogin classpronto-button pronto-login__submit tabindex4 valueВойти />/div>div classpronto-login__start pronto-login__multi-factor-authentication__form styledisplay: none;>	div classpronto-login__list pronto-login__multi-factor-authentication__methods-selector-form>		ul classpronto-login__list-content>			li classpronto-login__item>				label classpronto-login__type pronto-login__type-center>Выберите метод дополнительной аутентификации/label>			/li>		/ul>		div classpronto-login__multi-factor-authentication__methods-wrapper>			ul classpronto-login__list-content pronto-login__list-content_full-width idmultiFactorMethods>			/ul>		/div>	/div>	div classpronto-login__list pronto-login__multi-factor-authentication__confirmation-form styledisplay: none;>		ul classpronto-login__list-content pronto-login__list-content_full-width>			li classpronto-login__item>				label classpronto-login__type pronto-login__type-center>Двухфакторная аутентификация/label>			/li>		/ul>		ul classpronto-login__list-content>			li classpronto-login__item>				label classpronto-login__type>Код подтверждения/label>				span classpronto-login__field-wrapper>					input idtwoFactorAuthenticationCode typetext classpronto-login__field tabindex1/>				/span>			/li>		/ul>	/div>	div classpronto-login__list pronto-login__multi-factor-authentication__wait-form styledisplay: none;>		ul classpronto-login__list-content>			li classpronto-login__item>				label classpronto-login__type pronto-login__type-center>Ожидается завершение второго этапа аутентификации/label>			/li>		/ul>	/div>		div classpronto-login__error pronto-login__error-common pronto-login__multi-factor-authentication__error idx2authError>/div>	input typebutton classpronto-button pronto-login__multi-factor-authentication__start-button tabindex4 idx2authStartButton valueНачать >/input>	input typebutton classpronto-button pronto-login__multi-factor-authentication__start-button tabindex4 idx2authVerifyButton valueПроверить styledisplay: none;>/input>	a classpronto-login__link-button idx2authExitButton>Выход/a>	script typetext/javascript>		var selectedMethod, selectedType, x2authCallback, backgroundCheckInterval;		startMultifactorAuthentication  function (x2authNode, callback) {			x2authCallback  callback;			var methodsList  x2authNode.children();			if (methodsList.length  1) {				handleMultiFactorAuthenticationError(No x2auth methods, while expected);			} else {				showForm(select, true);				showForm(confirm, false);				showForm(wait, false);				$(#x2authError).hide();								var methodsWrapper  $(#multiFactorMethods);				methodsWrapper.empty();				methodsList.each(function(index, item){					var item  $(formMethodLi(item));					item.click(selectMethodByLiClick);					methodsWrapper.append(item);				});				selectMethodByLi(methodsWrapper.children()0);			}		},		showForm  function(form, visible) {			if (form  select) {				if (visible) {					$(.pronto-login__multi-factor-authentication__methods-selector-form).show();					$(#x2authStartButton).show();				} else {					$(.pronto-login__multi-factor-authentication__methods-selector-form).hide();					$(#x2authStartButton).hide();				}			} else if (form  confirm) {				if (visible) {					$(.pronto-login__multi-factor-authentication__confirmation-form).show();					$(#x2authVerifyButton).show();				} else {					$(.pronto-login__multi-factor-authentication__confirmation-form).hide();					$(#x2authVerifyButton).hide();				}			} else if (form  wait) {				if (visible) {					$(.pronto-login__multi-factor-authentication__wait-form).show();				} else {					$(.pronto-login__multi-factor-authentication__wait-form).hide();				}			}		},		handleMultiFactorAuthenticationError  function (error) {			$(#x2authError).show().text(getErrorString(error));		},		formMethodLi  function(itemNode) {			var labelTag  $(itemNode).find(subKeykeyhumanTag),				isSelector  $(itemNode).find(subValue).length > 0;			if (!labelTag || labelTag.length  1) {				labelTag  $(itemNode).find(subKeykeyhumanName);			}			if (!labelTag || labelTag.length  1) {				labelTag  null;			}			var labelText  labelTag ? getString(labelTag.text()) : $(itemNode).attr(key),				icon  $(itemNode).find(subKeykeyicon).length > 0 ? $(itemNode).find(subKeykeyicon).text() : null,				addressTag  $(itemNode).find(subKeykeyaddress),				addressText  addressTag.text() ? getString(addressTag.text()) : ,				liItemStr  li classpronto-login__item pronto-login__multi-factor-authentication__method-item method+$(itemNode).attr(key)+ type+ (isSelector ? select : text) +>;			liItemStr + span classpronto-login__field-wrapper pronto-login__multi-factor-authentication__method-item-radio>input typeradio namemethodsGroup value+$(itemNode).attr(key)+/>/span>;			if (icon) {				// add a custom icon for the 2FA method				var x2aIconUrl  /SkinFiles/aps.mark-itt.ru/Pronto/ + icon;				liItemStr + span classpronto-login__field-wrapper pronto-login__multi-factor-authentication__method-item-icon>img stylewidth: 24px; height: 24px; src				liItemStr + x2aIconUrl;				liItemStr + />/span>;			}			liItemStr + span classpronto-login__field-wrapper pronto-login__multi-factor-authentication__method-item-label> + labelText + /span>;			liItemStr + span classpronto-login__field-wrapper pronto-login__multi-factor-authentication__method-item-value>;			if (isSelector) {				liItemStr + select classpronto-login__multi-factor-authentication__custom-selector>;				addressTag.children().each(function(index, customAddressItem){					liItemStr + option index + index + > + $(customAddressItem).text() + /option>;				});				liItemStr + /select>;			} else {				liItemStr + addressText;			}			liItemStr + /span>/li>;			return liItemStr;		},		selectMethodByLi  function(li) {			$(li).find(input).prop(checked, true);			selectedMethod  $(li).attr(method);			selectedType  $(li).attr(type);		},		selectMethodByLiClick  function(event) {			selectMethodByLi(event.currentTarget);		},		x2auth_exit  function() {			if (backgroundCheckInterval) {				clearInterval(backgroundCheckInterval);			}			if (x2authCallback) {				x2authCallback(Exit);				x2authCallback  null;			}		},		x2auth_start  function() {			if (!sessionInstance) {				return;			}			sessionInstance.setAsyncProcessor(this, function (sessionXML) {				if (x2authCallback) {					x2authCallback();					x2authCallback  null;				}			}, x2authCompleted);			showForm(select, false);			var x2AuthStartNode  sessionInstance.createXMLNode(x2AuthStart);			if (selectedType  select) {				var selector  $(.pronto-login__multi-factor-authentication__custom-selector),					customIndex  0;				var option  selector0.selectedOptions0;				if (option) {					customIndex  $(option).attr(index);				}				x2AuthStartNode.setAttribute(index, customIndex);			}			x2AuthStartNode.appendChild(sessionInstance.createTextNode(selectedMethod));			sessionInstance.sendRequest(x2AuthStartNode, null, function (responseXML, requestXML) {							if ($(responseXML).attr(background)  1) {					showForm(wait, true);					x2auth_background();				} else if ($(responseXML).attr(user)  1) {					showForm(confirm, true);					$(#twoFactorAuthenticationCode).val();				} else {					handleMultiFactorAuthenticationError(Wrong answer);				}			}, function (error, requestXML) {			}, true);		},		x2auth_verify  function() {			var code  $(#twoFactorAuthenticationCode).val();			$(#x2authError).hide();			x2auth_complete(code, function(error){				if (error) {					handleMultiFactorAuthenticationError(error);				} else {					if (x2authCallback) {						x2authCallback();						x2authCallback  null;					}				}			});		},		x2auth_background  function() {			backgroundCheckInterval  setInterval(function() {				x2auth_complete(null, function(error){					if(error) {					} else {						clearInterval(backgroundCheckInterval);						if (x2authCallback) {							x2authCallback();							x2authCallback  null;						}					}				});			}, 2000);		},		x2auth_complete  function(data, callback) {			var x2AuthCompleteNode  sessionInstance.createXMLNode(x2AuthComplete);			if (data) {				x2AuthCompleteNode.appendChild(sessionInstance.createTextNode(data));			}			sessionInstance.sendRequest(x2AuthCompleteNode, null, null, function (error, requestXML) {				if (callback) {					callback(error);				}			}, true);				},		getString  function (str) {			var string  Test;			if (typeof __stringsXml  undefined) {				return str;			}			try {				var query  str.split(.).map(function (part) { return name + part + ; }).join( );				string  __stringsXml.querySelector(query);				if (!string) {					return str;				}				if (string.nodeName  string) {					return string.textContent;				}			} catch (e) {				string  str;			}			return string;		},		getErrorString  function (str) {			var string  Error;			if (typeof __stringsXml  undefined) {				return str;			}			try {				var labelId  ErrorCodes. + str,					query  labelId.split(.).map(function (part) { return name + part + ; }).join( );				string  __stringsXml.querySelector(query);				if (!string) {					return str;				}				if (string.nodeName  string) {					return string.textContent;				}			} catch (e) {				string  str;			}			return string;		},		initMultifactor  function() {			$(#twoFactorAuthenticationCode).keydown(function(event){				if (event.keyCode  13) {					x2auth_verify();				}			});			$(#x2authStartButton).click(x2auth_start);			$(#x2authVerifyButton).click(x2auth_verify);			$(#x2authExitButton).click(x2auth_exit);		};	/script>/div>div classpronto-login__start pronto-login__change-password__form styledisplay: none;>	div classpronto-login__list>		ul classpronto-login__list-content pronto-login__list-content_full-width>			li classpronto-login__item>				label classpronto-login__type pronto-login__type-center>Изменение Пароля/label>			/li>		/ul>		ul classpronto-login__list-content>			li classpronto-login__item>				label classpronto-login__type>Текущий Пароль/label>				span classpronto-login__field-wrapper>input idpasswordModification_oldPassword 					typepassword classpronto-login__field tabindex1/>/span>			/li>			li classpronto-login__item>				label classpronto-login__type>Новый Пароль/label>				span classpronto-login__field-wrapper>input idpasswordModification_newPassword 					typepassword classpronto-login__field tabindex2/>/span>			/li>			li classpronto-login__item>				label classpronto-login__type>Повтор Нового Пароля/label>				span classpronto-login__field-wrapper>input idpasswordModification_verifyPassword 					typepassword classpronto-login__field tabindex3/>/span>			/li>		/ul>	/div>		div classpronto-login__error pronto-login__error-common pronto-login__multi-factor-authentication__error idpasswordModificationError>/div>	input typebutton idpasswordModification_startModify classpronto-button pronto-login__change-password__start-button tabindex4 valueИзменить >/input>	a classpronto-login__link-button idpasswordModification_cancelModify>Выход/a>	script typetext/javascript>		var passwordModifyCallback,			doNotMatchMessage  Пароли не совпадают,		startPasswordModification  function (callback) {			passwordModifyCallback  callback;			$(#passwordModificationError).hide();		},		handlePasswordModificationError  function (error) {			$(#passwordModificationError).show().text(getErrorString(error));		},		passwordModify_exit  function() {			if (passwordModifyCallback) {				passwordModifyCallback(Exit);				passwordModifyCallback  null;			}		},		passwordModify_start  function() {			var oldPassword  $(#passwordModification_oldPassword).val(),				newPassword  $(#passwordModification_newPassword).val(),				reenterPassword  $(#passwordModification_verifyPassword).val();						$(#passwordModificationError).hide();			if (!oldPassword) {				handlePasswordModificationError(No old password);				return;			}			if (!newPassword || newPassword ! reenterPassword) {				handlePasswordModificationError(doNotMatchMessage);				return;			}			if (!sessionInstance) {				return;			}			$(.pronto-login__change-password__form).hide();			$(.pronto-login__siginingin).show();			var passwordModifyNode  sessionInstance.createXMLNode(passwordModify);			passwordModifyNode.setAttribute(oldPassword, oldPassword);			passwordModifyNode.setAttribute(newPassword, newPassword);			sessionInstance.sendRequest(passwordModifyNode, null, null, function (error, requestXML) {				$(.pronto-login__siginingin).hide();				$(.pronto-login__change-password__form).show();				if (error) {					handlePasswordModificationError(error);				} else {					storedPassword  newPassword;					if (passwordModifyCallback) {						passwordModifyCallback();						passwordModifyCallback  null;					}				}			}, true);		},		getErrorString  function (str) {			var string  Error;			if (typeof __stringsXml  undefined) {				return str;			}			try {				var labelId  ErrorCodes. + str,					query  labelId.split(.).map(function (part) { return name + part + ; }).join( );				string  __stringsXml.querySelector(query);				if (!string) {					return str;				}				if (string.nodeName  string) {					return string.textContent;				}			} catch (e) {				string  str;			}			return string;		},		initPasswordModification  function() {			$(#passwordModification_startModify).click(passwordModify_start);			$(#passwordModification_cancelModify).click(passwordModify_exit);		};	/script>/div>div classpronto-login__start pronto-login-password-recovery__start styledisplay: none;>	div classpronto-login__list>		ul classpronto-login__list-content>			li classpronto-login__item>label	classpronto-login__type>Имя Пользователя/label>				span classpronto-login__field-wrapper>input idusername nameUsername typetext classpronto-login__field pronto-login__recover-account-password tabindex1/>/span>			/li>		/ul>	/div>	input typebutton namepasswordRecovery classpronto-button pronto-login__recover-password tabindex3 valueОтправить мне мой Пароль />	div classpronto-login__error pronto-login__error-password-recovery>/div>	div classpronto-login__success pronto-login__soccess-password-recovery>Пароль отправлен на адрес восстановления/div>	a classpronto-login__link-button pronto-login__cancel-recover-password>Отменить/a>/div>div classpronto-login__siginingin>	div classpronto-login__spinner>		div classpronto-login__spinner__bar1>/div>		div classpronto-login__spinner__bar2>/div>		div classpronto-login__spinner__bar3>/div>		div classpronto-login__spinner__bar4>/div>		div classpronto-login__spinner__bar5>/div>		div classpronto-login__spinner__bar6>/div>		div classpronto-login__spinner__bar7>/div>		div classpronto-login__spinner__bar8>/div>		div classpronto-login__spinner__bar9>/div>		div classpronto-login__spinner__bar10>/div>		div classpronto-login__spinner__bar11>/div>		div classpronto-login__spinner__bar12>/div>	/div>	Загрузка/div>            /form>            div stylemargin-bottom:10px>2FA with ActiveAuth/div>a target_blank hrefhttps://play.google.com/store/apps/details?idcom.activeauth>img srchttps://play.google.com/intl/en_us/badges/images/generic/en_badge_web_generic.png altGet it on Google Play width116 stylevertical-align: middle;>/a>a target_blank hrefhttps://apps.apple.com/us/app/activeauth/id1441427571?itsctapps_box_badge&itscg30200 styleoverflow: hidden; border-radius: 13px;>img srchttps://tools.applemediaservices.com/api/badges/download-on-the-app-store/black/en-us?size250x83&releaseDate1549497600 altDownload on the App Store width116 styleborder-radius: 13px; height: 31px; vertical-align: middle;>/a>          /div>          !--  -->        /div>        div classpronto-login__wrapper-footer>          div classpronto-login__footer>            div classpronto-login__copyright>Copyright © 2024, CommuniGate Software Development and Licensing SA/div>div classpronto-login__copyright pronto-login__copyright-version idpronto_version>Pronto! v. 2.7.1.9/div>          /div>        /div>      /div>    /div>    !-- END login window -->    script typetext/javascript src/SkinFiles/aps.mark-itt.ru/Pronto/polyfill.js?rand6.23.0>/script>    script typetext/javascript src/SkinFiles/aps.mark-itt.ru/Pronto/fetch.js?rand2.0.3>/script>    script typetext/javascript src/SkinFiles/aps.mark-itt.ru/Pronto/checkbrowser.js?rand3ddb1caa>/script>    script typetext/javascript>      var basePathRef  /SkinFiles/aps.mark-itt.ru/Pronto/,          __stringsXml  null,          __stringsLang  russian,          __skinPath  /SkinFiles/aps.mark-itt.ru/Pronto/,          __skinName  Pronto,          __protocolVersion  6.1,          __asyncMode  syncPOST,          __asyncInput  true,          __asyncOutput  true,          __useCookie  YES,          __versionNumber  2.7.1.9,          __revisionNumber  3ddb1caa,          useSMSAuth  no,          skin  spark,          loginDomains  JSON.parse(null),          enableCredentialsStoring  (function(){              var rawValue  .toLowerCase();              return rawValue  yes || rawValue  true || rawValue  1;          })();      (function () {          use strict;          var scriptsLoaded  false,              loadingStarted  false;          function loadScript(scr, callback) {              var script  document.createElement(script);              script.src  scr;              script.onload  callback;              document.body.appendChild(script);          }          function loadLoginScripts() {              if (scriptsLoaded || loadingStarted) {                  return;              }              loadingStarted  true;              loadScript(/SkinFiles/aps.mark-itt.ru/Pronto/jquery.js?rand2.0.3, function () {                  var loadedScripts  0;                  function checkLoading() {                      loadedScripts++;                      if (loadedScripts  13) {                          scriptsLoaded  true;                      }                  }                  loadScript(/SkinFiles/aps.mark-itt.ru/Pronto/lodash.js?rand4.17.4, function () {                      checkLoading();                  });                  loadScript(/SkinFiles/aps.mark-itt.ru/Pronto/log4javascript.js?rand1.4.6, function () {                      checkLoading();                  });                  loadScript(/SkinFiles/aps.mark-itt.ru/Pronto/angular.js?rand1.4.5, function () {                      loadScript(/SkinFiles/aps.mark-itt.ru/Pronto/angular-sanitize.js?rand1.4.5, function () {                          checkLoading();                      });                  });                  loadScript(/SkinFiles/aps.mark-itt.ru/Pronto/fullcalendar.js?rand1.6.1, function () {                      checkLoading();                  });                  loadScript(/SkinFiles/aps.mark-itt.ru/Pronto/jquery-scroll-to.js?rand1.4.3.1, function () {                      checkLoading();                  });                  loadScript(/SkinFiles/aps.mark-itt.ru/Pronto/jquery-ui.js?rand1.11.1, function () {                      checkLoading();                  });                  loadScript(/SkinFiles/aps.mark-itt.ru/Pronto/mousetrap.js?rand1.4.5, function () {                      checkLoading();                  });                  loadScript(/SkinFiles/aps.mark-itt.ru/Pronto/jszip.js?rand3.0.0, function () {                      checkLoading();                  });                  loadScript(/SkinFiles/aps.mark-itt.ru/Pronto/redactor.js?rand9.1.9, function () {                      checkLoading();                  });                  loadScript(/SkinFiles/aps.mark-itt.ru/Pronto/signals.js?rand1.0.0.268, function () {                      checkLoading();                  });                  loadScript(/SkinFiles/aps.mark-itt.ru/Pronto/gibberish-aes.js?rand3ddb1caa, function () {                      checkLoading();                  });                  loadScript(/SkinFiles/aps.mark-itt.ru/Pronto/crydigestmd5.js?rand3ddb1caa, function () {                      checkLoading();                  });                  loadScript(/SkinFiles/aps.mark-itt.ru/Pronto/ximssclient.js?rand3ddb1caa, function () {                      checkLoading();                  });              });          }          function loadStyle(fileName, callback) {              var head   document.getElementsByTagName(head)0;              var link   document.createElement(link);              link.rel   stylesheet;              link.type  text/css;              link.href  fileName;              try {                  link.onload   callback;              } catch (e) {                  if (callback) {                      callback();                  }              }              head.appendChild(link);          }          function checkIsReady () {              if (!scriptsLoaded) {                  if (document.browserChecked && document.canLogin) {                      loadLoginScripts();                  }                  setTimeout(function () {                      checkIsReady();                  }, 100);              } else {                  $.ajax({                      url: basePathRef + login.js?rand + __revisionNumber,                      dataType: script,                      dataFilter: function (data, type) {                          return data + \n\n//@ sourceURLlogin.js\n\n//# sourceURLlogin.js;                      },                      cache: true,                      success: function () {                          $.ajax({                              type: GET,                              url: basePathRef + (__stringsLang || strings) + .xdata?rand + __revisionNumber,                              dataType: xml,                              cache: true,                              success: function (xml) {                                  __stringsXml  xml.childNodes0;                              }                          });                      },                      error: function (jqxhr, settings, exception) {                          $(.pronto-login__error-common).show().text(exception);                      }                  });              }          }          if (skin  ) {              skin  classic;          }          var loginButtonStyleFile  pronto-button- + skin + .css,              loginButtonStyleURL  basePathRef + loginButtonStyleFile + ?rand + __revisionNumber,              loginStyleFile  pronto-login- + skin + .css,              loginStyleURL  basePathRef + loginStyleFile + ?rand + __revisionNumber;          loadStyle(loginButtonStyleURL, function () {              loadStyle(loginStyleURL, function () {                  loadStyle(basePathRef + custom-login-skin.css?rand + __revisionNumber);                  document.getElementsByTagName(body)0.style.display  block;                  checkIsReady();              });          });      }());    /script>  /body>/html>

Port 443

HTTP/1.1 200 OKConnection: keep-aliveDate: Mon, 20 Jan 2025 05:25:30 GMTContent-Type: text/html;charsetutf-8Content-Length: 32871Server: CommuniGatePro/7.1.4X-Content-Type-Options: nosniffX-XSS-Protection: 1;modeblockX-Frame-Options: DENY

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > relay2.mark-itt.ru

Is this malicious?

Files that talk to relay2.mark-itt.ru

DNS Resolutions

Port 80

Port 443